IP 44.193.116.169 was identified as a High Risk asset with a risk score of 70. The address resolved to Amazon Data Services Northern Virginia (ASN 14618) infrastructure in Ashburn, VA, functioning as an AWS EC2 instance. Operational analysis showed the host served HTTPS traffic on port 443. Certificate validation indicated a mismatch, with the certificate issued by Nintendo Server CA G4 v1 for a Nintendo domain hosted on an AWS IP. Despite the absence of direct blacklist listings, the node was categorized as a Suspicious Host with unknown intent. Intelligence records indicate the address was active from 2026-09-02 to 2026-09-26. A threat sibling was identified within the /24 subnet. The asset was recommended for blocking via firewall rules.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Amazon Data Services Northern Virginia |
| ASN | AS14618 |
| Network Name | AMAZON-IAD |
| CIDR Block | 44.192.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | ec2-44-193-116-169.compute-1.amazonaws.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | ec2-44-193-116-169.compute-1.amazonaws.com |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 6/6 domains |
| DMARC | 6/6 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 6 domains |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | *.hac.lp1.penne.srv.nintendo.net |
| Valid From | 2026-01-30T23:27:47+00:00 |
| Valid Until | 2027-03-02T00:27:47+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 395 days |
| Serial Number | 00A7040EE974A35023597741A842005657 |
| Thumbprint | 59AE727658354ACD51B1FD1EC7E80F4D87F491EF |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 38% | 2 | 5 |
| ownership | 27% | 2 | 4 |
| reputation | 27% | 1 | 5 |
| geolocation | 38% | 2 | 5 |
| Overall | 30% | 10 | 26 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-02 05:26:06 UTC |
| Last Seen | 2026-09-26 03:47:42 UTC |
| Profile Built | 2026-09-26 04:01:16 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 48 |
Full dossier details are available via our API.